Skip to content
Threat Feed
Subscribe

Product

Reactpress (<= 3.6.0)

1 brief RSS
high advisory

SQL Injection in ReactPress API via Unsanitized Query Parameter Names

An unauthenticated SQL injection vulnerability in ReactPress allows attackers to exfiltrate database contents via malicious HTTP query parameter keys in API requests.

reactpress sqli vulnerability api-security
1r 1t 1c